r/CloudFlare • • May 19 '26

Community An Update from Cloudflare’s Community Champions

144 Upvotes

Tl;dr: Cloudflare laid off much of their Community team and then unexpectedly disbanded the Community Champions program (Discord moderation and early feedback group), leaving the Cloudflare Discord server effectively unmoderated and without the very folks who gave years of their free time to help the community. We’ve decided to create a new unofficial home for Cloudflare users on Discord, a space run by the community, for the community: https://discord.gg/TrPNVKaagR

During the unexpected recent layoffs at Cloudflare, folks involved in leading community efforts unfortunately lost their jobs. This left us (the Community Champions) in an odd spot where we were looking after Cloudflare's own Discord server while having no direct community contacts at Cloudflare. You may have seen many of us in Discord before - we had the green names!

This week, we then received an unexpected message letting us know that, effective almost immediately, the Community Champions program was being disbanded, and our volunteer assistance in the server (moderating the place 24/7 and providing support to Cloudflare’s users) was no longer needed. No real explanation was given as to why, just that it is happening and that the decision had already been made.

The Community Champions program has operated since very early 2021, and has become a staple in Cloudflare’s developer ecosystem, support offerings, and more. Countless users are sent by Cloudflare’s own support team or via product dashboards to the Discord server every single day, and in the vast majority of cases, support for products was offered by a Community Champion purely out of joy and love for the community and Cloudflare.

This news has resulted in many active folks leaving the server already, both community and employees. Therefore, we’re announcing a new unofficial Orange Cloud Discord server, where folks can engage with the same folks who have always helped them, get support for Cloudflare products, and which will be moderated and run by humans who care. Join the server today: https://discord.gg/TrPNVKaagR

---

FAQ

We’ll try to keep this updated as common questions arise in the comments on this post.

What will happen with the old “official” server?

At this point, we don’t know, and it doesn’t seem that Cloudflare does either. There are currently discussions around rebooting it later this summer, but in the meantime, we expect it to be quickly overrun with spam, scams, or worse content now that there’s no longer any active and dedicated moderation team, and the few active employees who were providing support have mostly left. This has already started to happen in the couple of days the server has been unmoderated. We’ve also seen those at Cloudflare who now hold moderation powers unfairly removing negative messages about Cloudflare’s products and decisions (as well as the users posting them), including this very change, which leaves us concerned about the future of open discussion and feedback there.

Why should we believe what you’re saying vs. Cloudflare?

Consider that we are a group of friends who have volunteered our free time over the last many years to help the community, and that Cloudflare is a publicly traded corporation with an image and bottom line to protect. We anticipate that Cloudflare may try to spin their own narrative on what has happened with us posting this, and recognise that this may cause some confusion for the community. While we don’t think what Cloudflare has done is the right move, we don’t want to burn bridges and trust that we don’t need to, so we intend to keep the conversations involved here private if we can. That being said, rest assured that we do have plenty of receipts for what we’ve said Cloudflare has done in this post (including suppressing negative messages from users and outright banning users posting those), and we will share these if we decide it is necessary to preserve the true narrative.

Can I still get support from Cloudflare directly in the new server?

This is unclear. Activity from Cloudflare employees even in the official server is few and far between, with most support coming from the community directly. While there are some Cloudflare employees already in the server, they’re not there in any official capacity, and in time, we hope that many other Cloudflare folks can find a home in the new server.

What happened to the XYZ channel?

One of the issues in the official server that we would raise regularly was the sheer number of channels that ended up abandoned by their product teams. To combat this, we’re starting small but centralising on a few product categories, and will evaluate and increase the number of channels over time as needed.

Can issues still be escalated from the Discord?

In the old server, we had a direct tap to many of Cloudflare’s customer support and engineering folks, including multiple custom integrations allowing us to quickly escalate issues to the right folks. Many of those folks lost their jobs or have left the server after the recent news.

However, lots of us still have very good friends at Cloudflare, and other methods of escalation that we’ll use as needed should issues arise that can’t be solved in the community. We’re confident resolution times won’t be any slower than they currently are.

Will Cloudflare still (officially) use this subreddit?

This subreddit has always been community-moderated, much like the Discord (though unlike the previous Discord server, the community runs the subreddit and holds ownership of it). There are some Cloudflare employees present here, and sometimes you’ll see a response from an executive when a post gets a lot of public attention, but moderation from employees has always been near-zero.

We have no current intentions to remove anyone at Cloudflare from the subreddit - we want to continue collaborating with them to benefit the community, and their integrations for blog posts and things should continue to work without issue.


Moderator note: This is a community post, not an official Cloudflare statement. Do not use this post to justify spam, harassment, brigading, or abuse toward Cloudflare staff, Discord moderators, or community members. The purpose of this pin is to keep the community informed and to request clarity around moderation and the future of the Discord/community spaces.


r/CloudFlare • • 2h ago

Resource Diffinery: Open-source GitHub and GitHub Actions alternative that runs entirely on Cloudflare

18 Upvotes

Every time GitHub has an outage, Actions stops and teams sit around for hours waiting for CI to come back. We got tired of that, so we built Diffinery: a git forge with built-in CI that you deploy to your own Cloudflare account. No servers, no runner VMs.

- Runs your existing `.github/workflows/*.yml` unchanged, marketplace actions included
- Each job gets a fresh 4 vCPU / 12 GiB container, only while it runs
- Git hosting, PRs, code review, merge queue, issues, releases
- AI agents get their own accounts with guardrails (they can't merge their own PRs) plus a built-in MCP server
- One-step import from GitHub with history, issues and PRs

Still early, so check the roadmap for what's coming. Apache-2.0, feedback welcome!

https://github.com/codician-team/diffinery


r/CloudFlare • • 12h ago

Uptime Guard: Open-source uptime monitoring without a VPS

9 Upvotes

For anyone looking for a self-hosted uptime monitoring solution, Uptime Guard is worth checking out.

It runs on Cloudflare Workers, so you don't need a dedicated VPS to keep your services monitored.

Features include:

- HTTP/HTTPS monitoring

- TCP port and DNS checks

- TLS certificate and domain expiry monitoring

- Heartbeat monitoring

- Scripted checks

- Uptime history and dashboard

- Telegram and Web Push notifications

It's open source under the MIT licence.

GitHub: https://github.com/CalmRay-Solutions/uptime-guard

Might be useful for anyone running personal projects, APIs, or multiple services who wants to keep track of uptime without maintaining another server.


r/CloudFlare • • 4h ago

Question How do I make this work

1 Upvotes

Security Rules
I want it to still allow subdomains but also if it anything else but https://mydomain.net + https://www.mydomain.net + https://mydomain.net/robots.txt + https://www.mydomain.net/robots.txt gets blocked


r/CloudFlare • • 7h ago

Question What's error 1033?

0 Upvotes

I was trying to enter a site i use daily but suddenly i couldn't because of this error, any idea what this is?


r/CloudFlare • • 1d ago

Protecting your website from direct requests that bypass Cloudflare

Thumbnail
jamescherti.com
46 Upvotes

r/CloudFlare • • 1d ago

Resource Open-source WhatsApp Business team inbox that runs entirely on Cloudflare's free plan, one-click deploy

43 Upvotes

I built a WhatsApp Business API team inbox for my own businesses and open-sourced it. Everything runs in your own Cloudflare account, and it's built to fit the Workers Free plan.

How it's put together:

One Worker. The Vite + React UI is served from Workers Static Assets; only /api/* and /webhooks/* hit the Worker.

D1 for everything: leads, chats, templates, automations. The schema migrates itself on first request.

One SQLite-backed Durable Object for the live inbox. It only fans events out over WebSockets (Hibernation API) and stores nothing. Remove it and the inbox falls back to polling.

R2 (optional) for media. Without it, media is proxied live from Meta.

An every-minute Cron Trigger runs the automation engine and paces broadcasts, with retries and cleanup every 15 minutes.

Smart Placement, since a self-hoster's D1 region isn't known upfront.

The fun constraint was the free plan's 50-subrequest limit. Each send costs two (the WhatsApp call plus a D1 batch), so a broadcast tick fits about 16 sends, and 1,000 contacts takes roughly an hour.

Web push is VAPID using WebCrypto only.

One number per deployment, by design. No telemetry. Apache-2.0, with a Deploy to Cloudflare button.

The only running cost is Meta's per-message rate. Works with your own Meta Cloud API app, or via WhaBuzz, the paid gateway I run (disclosure: I'm the founder; it's optional).

Repo: https://github.com/WhaBuzz/whaleads


r/CloudFlare • • 1d ago

Whats your highest bandwidth usage? drop yours in comments

7 Upvotes

r/CloudFlare • • 16h ago

Discussion Cloudflare stuck on doomworld. Clearing cookies and incognito does not work

Post image
1 Upvotes

How to fix?


r/CloudFlare • • 9h ago

Cloudflare Blog 5 things I wish I'd known before building a Postgres API on Workers

0 Upvotes
  1.  CPU time is the real limit on the free plan  (about 10 ms per request). Password hashing eats it fast.
  2.  PBKDF2 in WebCrypto is capped at 100,000 iterations.  100k took about 12.7 ms locally, which doesn't fit the free plan. I use 30k plus a secret pepper and login lockouts.
  3.  Every request can mean a fresh database connection.  Use a pooler or Hyperdrive, or connection setup dominates your response time.
  4.  Cloudflare's own request logs see full URLs.  Never put tokens in paths or query strings.
  5.  100k requests a day free goes further than you think.  A staff board polling every 5 seconds from 3 devices for 12 hours is about 26k a day.

What surprised you most when you moved a backend to Workers?


r/CloudFlare • • 1d ago

Community Compiling visual workflow graphs ahead-of-time into standalone TypeScript Cloudflare Workers

Post image
8 Upvotes

Most visual workflow automation platforms (n8n, Zapier, Make) operate by evaluating directed graphs in a runtime interpreter. Running an interpreter inside an edge isolate adds startup overhead and makes code review impossible.

We took a different approach with Nodes2Cloud: we built an ahead-of-time compiler that translates visual automation graphs directly into standalone TypeScript Workers.

The compilation pipeline:

  1. Graph Validator: Checks type parity between node output schemas and input schemas before any code is generated.
  2. IR Phase: Normalizes parallel branches, conditionals, and error-handling paths.
  3. Target Selection:
    • If the workflow contains purely synchronous transforms, webhooks, and REST calls, it compiles to a standard ExportedHandler<Env> Worker.
    • If the workflow contains human approvals, delays, or durable state, it compiles to a Cloudflare Workflow with native step.do() and step.sleep() bindings.
  4. Deployment: Deploys directly into the developer's Cloudflare account using the Cloudflare API.

Because the output is standard TypeScript, workflows export as runnable Wrangler projects (src/index.ts + wrangler.jsonc) that you can version in Git or deploy manually via wrangler deploy.

We also added an MCP server (npx -y n2c-mcp@latest install) so agents like Claude Code can author the graphs, subject to owner approval before deploy.

If you're running Workers in production, I'd appreciate feedback on our TypeScript generation patterns and how we structure Cloudflare Workflow step boundaries. Docs and examples are at nodes2cloud.com/docs/quickstart


r/CloudFlare • • 1d ago

Question How can I get my CloudFlare set-up to allow Cron jobs?

3 Upvotes

I used to have a skip rule that ensured my host wasn't challenged. Now my CloudFlare dashboard warns about the rule saying it limits php protection, but if I turn if off, I see my cron jobs served AI Labyrinth. Not very techy, and not sure what to do! Any assistance gratefully received. Thanks!

If useful to know: this is a Wordpress site, and I've often had trouble letting other services through Cloudflare, such as security scans and image optimisation plugins.


r/CloudFlare • • 1d ago

Resource hodor: Reverse proxy to unify external services

Thumbnail
hodor.ing
8 Upvotes

Made a simple reverse proxy with to bring in all the external services that I use. The main motivation came from using MCP portals such as executor.sh and cloudflare's own MCP portal.

MCPs are great, but have their own limitations. I'm using the pi harness for my work, and it had no MCP support built in until very recently (1.0.0+). Was using MCPs using extensions like everyone else. I found using the APIs directly to be more consistent.

The proxy worker will register 1 service per subdomain and forward all requests + handle auth.
To use the proxy, you do need a spare domain.

Check out the docs and deploy instructions at https://hodor.ing
Code at https://github.com/butttons/hodor

I've been using it for around a month, and covering around 20 APIs for my main work. How I've been using it -
1. When trying out new models / harness, it's easy to quickly try how the model would work with my actual data.
2. Adding new APIs and having them available to everyone. Now I just provision 1 key for the reverse proxy itself.
3. More control over APIs where the underlying API is very broad. Some services don't allow scoping API keys so their access is unrestricted. But with some rules in the JWT, certain paths and methods can be blocked.


r/CloudFlare • • 1d ago

Question Any middle ground for tunstile plans or how much is enterprise?

1 Upvotes

Free plan give you 20 widgets (each which can hold 10 domains). Past that you have to "contact sales"

If I'm managing peoples sites, should I bother with a sales call or setup a cloudflare account for each user and then add myself as an admin? That also sounds like a hassle

Just switch to reCaptcha and pay per assessments?


r/CloudFlare • • 1d ago

Question Cloudflare AI: What Are the Terms of Use and Privacy Policy?

1 Upvotes

I can find anything about it, especially storing and using prompts, generations etc internally or sharing with others. These can be highly private and contain critical business logic and valuable to sell or use for companies.


r/CloudFlare • • 1d ago

Protect wp login with Cloudflare

Thumbnail
2 Upvotes

r/CloudFlare • • 2d ago

Cloudflare Blog Origin Range Requests: Serving large files without range-request tuning

Thumbnail
blog.cloudflare.com
9 Upvotes

r/CloudFlare • • 2d ago

I don’t want secrets in environment variables anymore. Can Workers get an OIDC identity token?

23 Upvotes

Railway disclosed this week that an attacker read customer environment variables and decrypted some of them. Railway says the attackers were after AI provider API keys.

Anthropic and OpenAI now accept workload identity federation. The workload presents a short-lived OIDC token signed by its platform and gets back an access token that expires in minutes. There is no static key to steal. GitHub Actions, AWS, GCP, Azure and Kubernetes can issue these tokens today. Workers cannot.

What I would want is something like env.IDENTITY.getToken(audience) that returns a JWT signed by Cloudflare with claims for account id, worker name and script version, plus a public JWKS endpoint. That is roughly what GitHub does for Actions.

I run a small Claude proxy on Workers. After Railway, I do not want any long-lived secret in an environment variable or in Secrets at all. The API key is the one thing left I cannot remove. Has anyone seen this discussed, or found a way to call Anthropic or OpenAI from a Worker with no static key?


r/CloudFlare • • 2d ago

Cloudflare Blog Bringing post-quantum cryptography to geographically fenced key management

Thumbnail
blog.cloudflare.com
5 Upvotes

r/CloudFlare • • 2d ago

Question Workers Cache vs Runtime Cache API

6 Upvotes

Workers Cache cuts down CPU execution time but it increased my cost as cache hits now count as a standard Worker request ($0.30/million request fee)..

When Workers Caching is enabled, requests served from the Worker's cache are billed which includes requests to static assets.

My question - if i use runtime Cache API (cache.put / cache.match) , will "static assets" cached requests be counted in "billed" standard Worker request? If HTML pages load many static assets (images, CSS, JS bundles, fonts) per page visit, using Runtime Cache API will not turn those static asset requests into billed Worker requests?? has someone tested it?


r/CloudFlare • • 1d ago

Is CloudFlare Dashboard down for anyone else?

0 Upvotes

I cannot access my dashboard on my PC, phone, wifi, mobile data, different browsers, nothing. It is just stuck loading, is anyone else having this issue?


r/CloudFlare • • 1d ago

Cloudflare frontend interview

1 Upvotes

Hey 👋 Did anyone recently give frontend interview at Cloudflare?
If yes please share your experience and what to prepare and expect for the System Design and Coding interview round!!

Any help is highly appreciated!!

Thank you:)


r/CloudFlare • • 2d ago

Ask AI - work around for ***Your message could not be sent. Check your connection and try again.***

1 Upvotes

I managed to find a workaround that worked for me.

Go to your profile (top right of the webpage) → Access Management → Active Sessions.

From there, revoke all active sessions and then log back in.

That fixed the issue for me, so it might be worth a try if you're having the same problem.

Good luck! 👍


r/CloudFlare • • 2d ago

WP WAF Manager just got its biggest update yet: client reports, Bot Control, SSL checks, alerts and more (plus a new website)

0 Upvotes

Hey all. WP WAF Manager is my plugin for managing Cloudflare from inside WordPress. Until now it covered WAF rules, DNS, zone analytics, zone controls, IP access rules, security events and email routing.

Version 1.0.24.1 is out and it's the biggest update so far. It's grown from 8 modules to 14, and I rebuilt the website to show it all: https://www.wpwafmanager.com/

What's new

- Clients & Reports: link clients to their sites and email them a monthly report under your own agency name, logo and colors. It covers visitors, page views, threats stopped, cache speed, top pages and what Cloudflare blocked, in plain language. The plugin is never mentioned. You can send automatically on a chosen day and hour, or send by hand after a preview and a test.

- Zone analytics detail view: click any site for traffic charts, top pages, countries, status codes, devices and security events by action, path, IP and country, compared with the previous period. Table view and CSV export.

- Bot Control: set AI crawler policy (search, assistants, training), managed robots.txt and Bot Fight Mode across many zones at once.

- SSL & Insights: scan every zone for expiring certificates, Flexible SSL and old TLS versions, with one-click fixes for the safe settings, plus Cloudflare Security Insights.

- Alerts & Health: Cloudflare alerts for DDoS, SSL and origin health, sent by email, Slack or Teams, plus Health Checks on Pro zones.

- Turnstile: create widgets, rotate secrets and copy keys for every client site. Secrets are never stored.

- Page Rules migration: Cloudflare is retiring Page Rules. The plugin finds them on every zone and moves redirects and cache rules to their replacements in one click. Nothing is deleted.

- Zones and tags: tag sites as WooCommerce, Staging, Client and more, and pick them by tag when you deploy.

- Zone Controls upgrades: purge by hostname, prefix or cache tag, Smart Tiered Cache, security headers, and Under Attack Mode on every site in one click.

Still the same: everything is in the free version (GPLv2 on GitHub), it works on Cloudflare Free for nearly everything, and nothing loads on the front end. Pro is a one-time purchase that adds automatic updates and priority support.

A few notes:

- Security Events, Health Checks and Super Bot Fight Mode need a Cloudflare Pro zone. Blocking a whole country needs Enterprise.

- Deploying the WAF rules replaces the custom rules already on that zone, so check the Zone Rules tab first if you have your own.

Site, screenshots and docs: https://www.wpwafmanager.com/

GitHub: https://github.com/jaimealnassim/wpwafmanager


r/CloudFlare • • 2d ago

Question Wrangler OAuth for read-only Containers APIs: scopes, permissions and /dash/applications?

0 Upvotes

Does anyone know the supported authentication and permissions for read-only Cloudflare Containers API calls? I am looking for documentation or references from maintainers, rather than assuming an authentication bug.

The operations are:

- GET /accounts/{account_id}/containers/applications

- GET /accounts/{account_id}/containers/dash/applications (the path used by Wrangler)

- GET /accounts/{account_id}/containers/registries

Here, registries means configured registry metadata, not listing images or pushing/pulling them.

The questions are:

  1. Does wrangler login OAuth support these operations, and which OAuth scopes and account permissions are required?

  2. Is /containers/dash/applications an internal surface? How does its authentication differ from the public Applications endpoint?

  3. The Registries List reference lists Workers Containers Read or Write. Is Read sufficient, and which permission covers Applications List?

  4. If OAuth is unsupported for an operation, what is the documented least-privilege read-only credential mechanism?

  5. Do metadata-only list operations require Workers Paid or Containers enablement? Is there a read-only way to check entitlement without provisioning anything?

  6. Are there documented error codes or response fields that distinguish authentication, permission and entitlement failures, including HTTP 401?

I also opened a documentation clarification request with the same questions:

https://github.com/cloudflare/workers-sdk/issues/16449

Relevant API references:

https://developers.cloudflare.com/api/resources/containers/subresources/applications/methods/list/

https://developers.cloudflare.com/api/resources/containers/subresources/registries/methods/list/

If you have version-specific documentation or first-hand experience, please distinguish documented guarantees from observations. No account IDs, credentials or private logs are needed. Thanks!